Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: 5TAhZGkLf7Mp2I7LmXWq2h47W2xtKd6JJ2lVOxAYm5M=
Subject key identifier: 5C:82:5A:4C:70:1C:DA:87:07:3D:CF:9B:F5:E1:42:04:70:5A:64:14
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 01A13E25CACFFFA9EDB28AFEFC4889D61397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 16B1
Signing time: Thu 15 Oct 2026 06:00:26 +0000
Manifest this update: Thu 15 Oct 2026 06:00:26 +0000
Manifest next update: Fri 16 Oct 2026 06:00:26 +0000
Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: L7Z1ooQV5TYeUYowkbTceu0z1Io5qTbjR95c5W6W5As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:ca:cf:ff:a9:ed:b2:8a:fe:fc:48:89:d6:13:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Oct 15 06:00:26 2026 GMT
Not After : Oct 16 06:00:26 2026 GMT
Subject: CN=5c825a4c701cda87073dcf9bf5e14204705a6414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:fe:d6:b1:35:65:01:a0:44:80:d1:44:e5:
8c:c2:58:1b:40:17:ea:25:2f:ad:6c:75:bf:91:b7:
81:af:3f:46:99:ef:11:e1:c6:62:62:e8:d4:1f:31:
51:37:75:7c:71:85:58:c3:cb:37:b9:14:cc:ff:d8:
ca:48:00:84:dc:5f:83:d0:c5:8e:fa:65:5a:3b:a8:
7f:ab:8a:f8:4d:a8:9c:cf:e6:67:35:f7:d5:c4:e8:
5b:d7:02:34:9b:28:4b:20:0e:f6:47:cc:5c:7f:ea:
85:c0:23:96:8b:40:3e:b4:04:52:b2:d5:00:1e:e9:
54:94:63:c9:62:33:25:41:2f:4a:0f:76:32:1b:75:
25:db:44:96:e6:0a:9f:19:93:9e:14:7e:8e:f1:08:
17:c8:91:b6:b8:00:bb:cd:6f:39:db:7c:96:21:57:
e2:6e:68:cf:d3:81:3e:f4:5a:c2:e6:65:da:42:c2:
75:7f:7f:e7:70:82:1a:49:68:6f:fd:a1:36:9a:28:
7b:63:b1:73:1e:23:b4:1f:26:4c:00:05:f4:5a:b6:
3b:9d:35:a2:f4:48:c6:cf:59:ca:ed:a1:cb:46:1d:
61:e0:7e:e0:a1:68:71:33:81:75:1f:7c:6c:d2:c3:
0c:08:71:9c:a8:fc:c7:21:2d:e4:84:83:33:63:27:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:5A:4C:70:1C:DA:87:07:3D:CF:9B:F5:E1:42:04:70:5A:64:14
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:91:bf:a4:64:28:d3:60:f0:15:ed:38:73:4c:7d:c9:4c:a6:
e0:f7:7c:17:a7:b6:82:10:48:e9:f9:34:45:f2:c6:d4:b0:ab:
ff:53:61:13:73:db:ef:4b:5e:d4:39:38:bb:8b:a4:4c:07:68:
e1:6c:31:bf:6a:02:5d:88:f2:23:7b:5e:13:68:9b:32:a6:0e:
88:9f:9e:01:71:73:ce:42:97:94:6d:cc:5f:67:56:83:e3:09:
9d:5e:e1:57:10:c9:fe:64:23:85:f0:7d:c3:29:f1:87:88:eb:
d9:df:28:e5:86:5b:63:00:d8:fe:d3:50:4f:03:5e:3a:f0:a1:
8b:ac:1f:72:fb:b2:91:b1:99:f5:1e:9e:2f:b8:b1:66:a5:07:
60:00:f4:c3:df:a8:6f:7f:e9:c9:c5:01:98:85:13:78:aa:2c:
1c:b4:79:06:77:dc:4d:8a:c2:0d:89:1e:f8:8e:c4:c8:2c:a9:
38:f4:f2:07:c8:8f:e7:b4:0c:e8:91:13:c9:89:91:0d:a4:18:
2a:5f:a8:e3:03:3c:02:50:fe:5b:76:98:41:e0:4c:92:9f:4e:
06:67:ae:98:c4:29:2b:d2:7a:0f:7b:a8:e4:d5:83:b7:e2:bb:
1e:ef:86:fd:42:8d:98:82:75:84:29:8f:6c:fa:0c:7a:1d:04:
f1:28:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:46:54 2026 by rpki-client